WebApp Sec: Re: Securing password between webserver & appserver.

[Chintan Oza <chintan.oza () gmail com>]

Dear Saqib,

Yes the webserver will be in the middle.

The password verification will be performed by the application server.

We just dont want the password to be available at the webserver where
the ssl communication ends.

Chintan

On Mon, Sep 7, 2009 at 1:10 PM, Ali, Saqib<docbook.xml () gmail com> wrote:
> Chintan,
>
> I am not sure if I understand your question. If you are using the
> webserver as the middleware, the authentication credentials will have
> to pass through it one way or the other.
>
> Can you please provide more details as to what problem are you trying
> to address?  Thanks
>
> Saqib
> http://kawphi.blogspot.com